diff --git a/assets/css/app.css b/assets/css/app.css index 97961ab..b754a08 100644 --- a/assets/css/app.css +++ b/assets/css/app.css @@ -181,6 +181,29 @@ padding-left: 14px; } +/* ============================================ + Menu Groups - Disable hover and active on expanded-menu-group header + ============================================ */ + +/* Disable all interactive effects on expanded-menu-group header (no href, not clickable) + Using [role="group"] to increase specificity and avoid !important */ +.sidebar .menu > li.expanded-menu-group > div[role="group"]:not(a) { + pointer-events: none; + cursor: default; +} + +/* Higher specificity selector to override DaisyUI menu hover styles + DaisyUI uses :where() which has 0 specificity, but the compiled CSS might have higher specificity + Using [role="group"] attribute selector increases specificity without !important */ +.sidebar .menu > li.expanded-menu-group > div[role="group"]:not(a):hover, +.sidebar .menu > li.expanded-menu-group > div[role="group"]:not(a):active, +.sidebar .menu > li.expanded-menu-group > div[role="group"]:not(a):focus { + background-color: transparent; + box-shadow: none; + cursor: default; + color: inherit; +} + /* ============================================ Elements Only Visible in Expanded State ============================================ */ @@ -217,7 +240,9 @@ - Menu has p-2 (8px), so links need 14px additional padding-left */ .sidebar .menu > li > a, -.sidebar .menu > li > button { +.sidebar .menu > li > button, +.sidebar .menu > li.expanded-menu-group > div, +.sidebar .menu > div.collapsed-menu-group > button { @apply transition-all duration-300; padding-left: 14px; } @@ -226,12 +251,17 @@ - Remove gap so label (which is opacity-0 w-0) doesn't create space - Keep padding-left at 14px so icons stay centered under logo */ [data-sidebar-expanded="false"] .sidebar .menu > li > a, -[data-sidebar-expanded="false"] .sidebar .menu > li > button { +[data-sidebar-expanded="false"] .sidebar .menu > li > button, +[data-sidebar-expanded="false"] .sidebar .menu > li.expanded-menu-group > div, +[data-sidebar-expanded="false"] .sidebar .menu > div.collapsed-menu-group > button { @apply gap-0; padding-left: 14px; padding-right: 14px; /* Center icon horizontally in 64px sidebar */ } + + + /* ============================================ Footer Button Alignment - Left Aligned in Collapsed State ============================================ */ diff --git a/config/test.exs b/config/test.exs index 326694e..45acaa4 100644 --- a/config/test.exs +++ b/config/test.exs @@ -12,7 +12,7 @@ config :mv, Mv.Repo, port: System.get_env("TEST_POSTGRES_PORT", "5000"), database: "mv_test#{System.get_env("MIX_TEST_PARTITION")}", pool: Ecto.Adapters.SQL.Sandbox, - pool_size: System.schedulers_online() * 2 + pool_size: System.schedulers_online() * 4 # We don't run a server during test. If one is required, # you can enable the server option below. diff --git a/docs/email-validation.md b/docs/email-validation.md new file mode 100644 index 0000000..74a1ffd --- /dev/null +++ b/docs/email-validation.md @@ -0,0 +1,62 @@ +# Email Validation Strategy + +We use `EctoCommons.EmailValidator` with both `:html_input` and `:pow` checks, defined centrally in `Mv.Constants.email_validator_checks/0`. + +## Checks Used + +- `:html_input` - Pragmatic validation matching browser `` behavior +- `:pow` - Stricter validation following email spec, supports internationalization (Unicode) + +## Rationale + +Using both checks ensures: +- **Compatibility with common email providers** (`:html_input`) - Matches what users expect from web forms +- **Compliance with email standards** (`:pow`) - Follows RFC 5322 and related specifications +- **Support for international email addresses** (`:pow`) - Allows Unicode characters in email addresses + +This dual approach provides a balance between user experience (accepting common email formats) and technical correctness (validating against email standards). + +## Usage + +The checks are used consistently across all email validation points: + +- `Mv.Membership.Import.MemberCSV.validate_row/3` - CSV import validation +- `Mv.Membership.Member` validations - Member resource validation +- `Mv.Accounts.User` validations - User resource validation + +All three locations use `Mv.Constants.email_validator_checks()` to ensure consistency. + +## Implementation Details + +### CSV Import Validation + +The CSV import uses a schemaless changeset for email validation: + +```elixir +changeset = + {%{}, %{email: :string}} + |> Ecto.Changeset.cast(%{email: Map.get(member_attrs, :email)}, [:email]) + |> Ecto.Changeset.update_change(:email, &String.trim/1) + |> Ecto.Changeset.validate_required([:email]) + |> EctoCommons.EmailValidator.validate_email(:email, checks: Mv.Constants.email_validator_checks()) +``` + +This approach: +- Trims whitespace before validation +- Validates email is required +- Validates email format using the centralized checks +- Provides consistent error messages via Gettext + +### Resource Validations + +Both `Member` and `User` resources use similar schemaless changesets within their Ash validations, ensuring consistent validation behavior across the application. + +## Changing the Validation Strategy + +To change the email validation checks, update the `@email_validator_checks` constant in `Mv.Constants`. This will automatically apply to all validation points. + +**Note:** Changing the validation strategy may affect existing data. Consider: +- Whether existing emails will still be valid +- Migration strategy for invalid emails +- User communication if validation becomes stricter + diff --git a/lib/accounts/user.ex b/lib/accounts/user.ex index ceedeae..9598b76 100644 --- a/lib/accounts/user.ex +++ b/lib/accounts/user.ex @@ -290,7 +290,9 @@ defmodule Mv.Accounts.User do changeset2 = {%{}, %{email: :string}} |> Ecto.Changeset.cast(%{email: email_string}, [:email]) - |> EctoCommons.EmailValidator.validate_email(:email, checks: [:html_input, :pow]) + |> EctoCommons.EmailValidator.validate_email(:email, + checks: Mv.Constants.email_validator_checks() + ) if changeset2.valid? do :ok diff --git a/lib/membership/member.ex b/lib/membership/member.ex index 41e02b1..5a4d01c 100644 --- a/lib/membership/member.ex +++ b/lib/membership/member.ex @@ -453,7 +453,9 @@ defmodule Mv.Membership.Member do changeset2 = {%{}, %{email: :string}} |> Ecto.Changeset.cast(%{email: email}, [:email]) - |> EctoCommons.EmailValidator.validate_email(:email, checks: [:html_input, :pow]) + |> EctoCommons.EmailValidator.validate_email(:email, + checks: Mv.Constants.email_validator_checks() + ) if changeset2.valid? do :ok diff --git a/lib/mv/constants.ex b/lib/mv/constants.ex index 82a8400..73bfcd9 100644 --- a/lib/mv/constants.ex +++ b/lib/mv/constants.ex @@ -19,6 +19,8 @@ defmodule Mv.Constants do @custom_field_prefix "custom_field_" + @email_validator_checks [:html_input, :pow] + def member_fields, do: @member_fields @doc """ @@ -30,4 +32,23 @@ defmodule Mv.Constants do "custom_field_" """ def custom_field_prefix, do: @custom_field_prefix + + @doc """ + Returns the email validator checks used for EctoCommons.EmailValidator. + + We use both `:html_input` and `:pow` checks: + - `:html_input` - Pragmatic validation matching browser `` behavior + - `:pow` - Stricter validation following email spec, supports internationalization (Unicode) + + Using both ensures: + - Compatibility with common email providers (html_input) + - Compliance with email standards (pow) + - Support for international email addresses (pow) + + ## Examples + + iex> Mv.Constants.email_validator_checks() + [:html_input, :pow] + """ + def email_validator_checks, do: @email_validator_checks end diff --git a/lib/mv/membership/import/member_csv.ex b/lib/mv/membership/import/member_csv.ex index 26756b4..ec729cd 100644 --- a/lib/mv/membership/import/member_csv.ex +++ b/lib/mv/membership/import/member_csv.ex @@ -76,6 +76,8 @@ defmodule Mv.Membership.Import.MemberCSV do alias Mv.Membership.Import.CsvParser alias Mv.Membership.Import.HeaderMapper + use Gettext, backend: MvWeb.Gettext + @doc """ Prepares CSV content for import by parsing, mapping headers, and validating limits. @@ -295,38 +297,157 @@ defmodule Mv.Membership.Import.MemberCSV do {:ok, %{inserted: inserted, failed: failed, errors: Enum.reverse(errors)}} end + @doc """ + Validates a single CSV row before database insertion. + + This function: + 1. Trims all string values in the member map + 2. Validates that email is present and not empty after trimming + 3. Validates email format using EctoCommons.EmailValidator + 4. Returns structured errors with Gettext-backed messages + + ## Parameters + + - `row_map` - Map with `:member` and `:custom` keys containing field values + - `csv_line_number` - Physical line number in CSV (1-based, header is line 1) + - `opts` - Optional keyword list (for future extensions) + + ## Returns + + - `{:ok, trimmed_row_map}` - Successfully validated row with trimmed values + - `{:error, %Error{}}` - Validation error with structured error information + + ## Examples + + iex> row_map = %{member: %{email: " john@example.com "}, custom: %{}} + iex> MemberCSV.validate_row(row_map, 2, []) + {:ok, %{member: %{email: "john@example.com"}, custom: %{}}} + + iex> row_map = %{member: %{}, custom: %{}} + iex> MemberCSV.validate_row(row_map, 3, []) + {:error, %MemberCSV.Error{csv_line_number: 3, field: :email, message: "Email is required."}} + """ + @spec validate_row(map(), pos_integer(), keyword()) :: + {:ok, map()} | {:error, Error.t()} + def validate_row(row_map, csv_line_number, _opts \\ []) do + # Safely get member map (handle missing key) + member_attrs = Map.get(row_map, :member, %{}) + custom_attrs = Map.get(row_map, :custom, %{}) + + # Validate email using schemaless changeset + changeset = + {%{}, %{email: :string}} + |> Ecto.Changeset.cast(%{email: Map.get(member_attrs, :email)}, [:email]) + |> Ecto.Changeset.update_change(:email, &String.trim/1) + |> Ecto.Changeset.validate_required([:email]) + |> EctoCommons.EmailValidator.validate_email(:email, + checks: Mv.Constants.email_validator_checks() + ) + + if changeset.valid? do + # Apply trimmed email back to member_attrs + trimmed_email = Ecto.Changeset.get_change(changeset, :email) + trimmed_member = Map.put(member_attrs, :email, trimmed_email) |> trim_string_values() + {:ok, %{member: trimmed_member, custom: custom_attrs}} + else + # Extract first error + error = extract_changeset_error(changeset, csv_line_number) + {:error, error} + end + end + + # Extracts the first error from a changeset and converts it to a MemberCSV.Error struct + defp extract_changeset_error(changeset, csv_line_number) do + case Ecto.Changeset.traverse_errors(changeset, fn {msg, opts} -> + Enum.reduce(opts, msg, fn {key, value}, acc -> + String.replace(acc, "%{#{key}}", to_string(value)) + end) + end) do + %{email: [message | _]} -> + # Email-specific error + %Error{ + csv_line_number: csv_line_number, + field: :email, + message: gettext_error_message(message) + } + + errors when map_size(errors) > 0 -> + # Get first error (any field) + {field, [message | _]} = Enum.at(Enum.to_list(errors), 0) + + %Error{ + csv_line_number: csv_line_number, + field: String.to_existing_atom(to_string(field)), + message: gettext_error_message(message) + } + + _ -> + # Fallback + %Error{ + csv_line_number: csv_line_number, + field: :email, + message: gettext("Email is invalid.") + } + end + end + + # Maps changeset error messages to appropriate Gettext messages + defp gettext_error_message(message) when is_binary(message) do + cond do + String.contains?(String.downcase(message), "required") or + String.contains?(String.downcase(message), "can't be blank") -> + gettext("Email is required.") + + String.contains?(String.downcase(message), "invalid") or + String.contains?(String.downcase(message), "not a valid") -> + gettext("Email is invalid.") + + true -> + message + end + end + + defp gettext_error_message(_), do: gettext("Email is invalid.") + # Processes a single row and creates member with custom field values defp process_row( - %{member: member_attrs, custom: custom_attrs}, + row_map, line_number, custom_field_lookup ) do - # Prepare custom field values for Ash - custom_field_values = prepare_custom_field_values(custom_attrs, custom_field_lookup) - - # Create member with custom field values - member_attrs_with_cf = - member_attrs - |> Map.put(:custom_field_values, custom_field_values) - |> trim_string_values() - - # Only include custom_field_values if not empty - final_attrs = - if Enum.empty?(custom_field_values) do - Map.delete(member_attrs_with_cf, :custom_field_values) - else - member_attrs_with_cf - end - - case Mv.Membership.create_member(final_attrs) do - {:ok, member} -> - {:ok, member} - - {:error, %Ash.Error.Invalid{} = error} -> - {:error, format_ash_error(error, line_number)} - + # Validate row before database insertion + case validate_row(row_map, line_number, []) do {:error, error} -> - {:error, %Error{csv_line_number: line_number, field: nil, message: inspect(error)}} + # Return validation error immediately, no DB insert attempted + {:error, error} + + {:ok, %{member: trimmed_member_attrs, custom: custom_attrs}} -> + # Prepare custom field values for Ash + custom_field_values = prepare_custom_field_values(custom_attrs, custom_field_lookup) + + # Create member with custom field values + member_attrs_with_cf = + trimmed_member_attrs + |> Map.put(:custom_field_values, custom_field_values) + + # Only include custom_field_values if not empty + final_attrs = + if Enum.empty?(custom_field_values) do + Map.delete(member_attrs_with_cf, :custom_field_values) + else + member_attrs_with_cf + end + + case Mv.Membership.create_member(final_attrs) do + {:ok, member} -> + {:ok, member} + + {:error, %Ash.Error.Invalid{} = error} -> + {:error, format_ash_error(error, line_number)} + + {:error, error} -> + {:error, %Error{csv_line_number: line_number, field: nil, message: inspect(error)}} + end end rescue e -> diff --git a/lib/mv_web/components/layouts/sidebar.ex b/lib/mv_web/components/layouts/sidebar.ex index 6f7e684..33319d4 100644 --- a/lib/mv_web/components/layouts/sidebar.ex +++ b/lib/mv_web/components/layouts/sidebar.ex @@ -75,30 +75,23 @@ defmodule MvWeb.Layouts.Sidebar do icon="hero-users" label={gettext("Members")} /> - <.menu_item - href={~p"/users"} - icon="hero-user-circle" - label={gettext("Users")} - /> - <.menu_item - href={~p"/custom_field_values"} - icon="hero-rectangle-group" - label={gettext("Custom Fields")} - /> - - <.menu_group - icon="hero-currency-dollar" - label={gettext("Contributions")} - > - <.menu_subitem href="/contribution_types" label={gettext("Contribution Types")} /> - <.menu_subitem href="/membership_fee_settings" label={gettext("Settings")} /> - <.menu_item - href={~p"/settings"} - icon="hero-cog-6-tooth" - label={gettext("Settings")} + href={~p"/membership_fee_types"} + icon="hero-currency-euro" + label={gettext("Fee Types")} /> + + + <.menu_group icon="hero-cog-6-tooth" label={gettext("Administration")}> + <.menu_subitem href={~p"/users"} label={gettext("Users")} /> + <.menu_subitem href={~p"/admin/roles"} label={gettext("Roles")} /> + <.menu_subitem + href={~p"/membership_fee_settings"} + label={gettext("Fee Settings")} + /> + <.menu_subitem href={~p"/settings"} label={gettext("Settings")} /> + """ end @@ -129,43 +122,41 @@ defmodule MvWeb.Layouts.Sidebar do defp menu_group(assigns) do ~H""" -